1 /*
2  *  linux/drivers/video/fbmem.c
3  *
4  *  Copyright (C) 1994 Martin Schaller
5  *
6  *	2001 - Documented with DocBook
7  *	- Brad Douglas <brad@neruo.com>
8  *
9  * This file is subject to the terms and conditions of the GNU General Public
10  * License.  See the file COPYING in the main directory of this archive
11  * for more details.
12  */
13 
14 #include <linux/module.h>
15 
16 #include <linux/compat.h>
17 #include <linux/types.h>
18 #include <linux/errno.h>
19 #include <linux/kernel.h>
20 #include <linux/major.h>
21 #include <linux/slab.h>
22 #include <linux/mm.h>
23 #include <linux/mman.h>
24 #include <linux/vt.h>
25 #include <linux/init.h>
26 #include <linux/linux_logo.h>
27 #include <linux/proc_fs.h>
28 #include <linux/seq_file.h>
29 #include <linux/console.h>
30 #include <linux/kmod.h>
31 #include <linux/err.h>
32 #include <linux/device.h>
33 #include <linux/efi.h>
34 #include <linux/fb.h>
35 
36 #include <asm/fb.h>
37 
38 
39     /*
40      *  Frame buffer device initialization and setup routines
41      */
42 
43 #define FBPIXMAPSIZE	(1024 * 8)
44 
45 static DEFINE_MUTEX(registration_lock);
46 struct fb_info *registered_fb[FB_MAX] __read_mostly;
47 int num_registered_fb __read_mostly;
48 
get_fb_info(unsigned int idx)49 static struct fb_info *get_fb_info(unsigned int idx)
50 {
51 	struct fb_info *fb_info;
52 
53 	if (idx >= FB_MAX)
54 		return ERR_PTR(-ENODEV);
55 
56 	mutex_lock(&registration_lock);
57 	fb_info = registered_fb[idx];
58 	if (fb_info)
59 		atomic_inc(&fb_info->count);
60 	mutex_unlock(&registration_lock);
61 
62 	return fb_info;
63 }
64 
put_fb_info(struct fb_info * fb_info)65 static void put_fb_info(struct fb_info *fb_info)
66 {
67 	if (!atomic_dec_and_test(&fb_info->count))
68 		return;
69 	if (fb_info->fbops->fb_destroy)
70 		fb_info->fbops->fb_destroy(fb_info);
71 }
72 
lock_fb_info(struct fb_info * info)73 int lock_fb_info(struct fb_info *info)
74 {
75 	mutex_lock(&info->lock);
76 	if (!info->fbops) {
77 		mutex_unlock(&info->lock);
78 		return 0;
79 	}
80 	return 1;
81 }
82 EXPORT_SYMBOL(lock_fb_info);
83 
84 /*
85  * Helpers
86  */
87 
fb_get_color_depth(struct fb_var_screeninfo * var,struct fb_fix_screeninfo * fix)88 int fb_get_color_depth(struct fb_var_screeninfo *var,
89 		       struct fb_fix_screeninfo *fix)
90 {
91 	int depth = 0;
92 
93 	if (fix->visual == FB_VISUAL_MONO01 ||
94 	    fix->visual == FB_VISUAL_MONO10)
95 		depth = 1;
96 	else {
97 		if (var->green.length == var->blue.length &&
98 		    var->green.length == var->red.length &&
99 		    var->green.offset == var->blue.offset &&
100 		    var->green.offset == var->red.offset)
101 			depth = var->green.length;
102 		else
103 			depth = var->green.length + var->red.length +
104 				var->blue.length;
105 	}
106 
107 	return depth;
108 }
109 EXPORT_SYMBOL(fb_get_color_depth);
110 
111 /*
112  * Data padding functions.
113  */
fb_pad_aligned_buffer(u8 * dst,u32 d_pitch,u8 * src,u32 s_pitch,u32 height)114 void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
115 {
116 	__fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
117 }
118 EXPORT_SYMBOL(fb_pad_aligned_buffer);
119 
fb_pad_unaligned_buffer(u8 * dst,u32 d_pitch,u8 * src,u32 idx,u32 height,u32 shift_high,u32 shift_low,u32 mod)120 void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
121 				u32 shift_high, u32 shift_low, u32 mod)
122 {
123 	u8 mask = (u8) (0xfff << shift_high), tmp;
124 	int i, j;
125 
126 	for (i = height; i--; ) {
127 		for (j = 0; j < idx; j++) {
128 			tmp = dst[j];
129 			tmp &= mask;
130 			tmp |= *src >> shift_low;
131 			dst[j] = tmp;
132 			tmp = *src << shift_high;
133 			dst[j+1] = tmp;
134 			src++;
135 		}
136 		tmp = dst[idx];
137 		tmp &= mask;
138 		tmp |= *src >> shift_low;
139 		dst[idx] = tmp;
140 		if (shift_high < mod) {
141 			tmp = *src << shift_high;
142 			dst[idx+1] = tmp;
143 		}
144 		src++;
145 		dst += d_pitch;
146 	}
147 }
148 EXPORT_SYMBOL(fb_pad_unaligned_buffer);
149 
150 /*
151  * we need to lock this section since fb_cursor
152  * may use fb_imageblit()
153  */
fb_get_buffer_offset(struct fb_info * info,struct fb_pixmap * buf,u32 size)154 char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
155 {
156 	u32 align = buf->buf_align - 1, offset;
157 	char *addr = buf->addr;
158 
159 	/* If IO mapped, we need to sync before access, no sharing of
160 	 * the pixmap is done
161 	 */
162 	if (buf->flags & FB_PIXMAP_IO) {
163 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
164 			info->fbops->fb_sync(info);
165 		return addr;
166 	}
167 
168 	/* See if we fit in the remaining pixmap space */
169 	offset = buf->offset + align;
170 	offset &= ~align;
171 	if (offset + size > buf->size) {
172 		/* We do not fit. In order to be able to re-use the buffer,
173 		 * we must ensure no asynchronous DMA'ing or whatever operation
174 		 * is in progress, we sync for that.
175 		 */
176 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
177 			info->fbops->fb_sync(info);
178 		offset = 0;
179 	}
180 	buf->offset = offset + size;
181 	addr += offset;
182 
183 	return addr;
184 }
185 
186 #ifdef CONFIG_LOGO
187 
safe_shift(unsigned d,int n)188 static inline unsigned safe_shift(unsigned d, int n)
189 {
190 	return n < 0 ? d >> -n : d << n;
191 }
192 
fb_set_logocmap(struct fb_info * info,const struct linux_logo * logo)193 static void fb_set_logocmap(struct fb_info *info,
194 				   const struct linux_logo *logo)
195 {
196 	struct fb_cmap palette_cmap;
197 	u16 palette_green[16];
198 	u16 palette_blue[16];
199 	u16 palette_red[16];
200 	int i, j, n;
201 	const unsigned char *clut = logo->clut;
202 
203 	palette_cmap.start = 0;
204 	palette_cmap.len = 16;
205 	palette_cmap.red = palette_red;
206 	palette_cmap.green = palette_green;
207 	palette_cmap.blue = palette_blue;
208 	palette_cmap.transp = NULL;
209 
210 	for (i = 0; i < logo->clutsize; i += n) {
211 		n = logo->clutsize - i;
212 		/* palette_cmap provides space for only 16 colors at once */
213 		if (n > 16)
214 			n = 16;
215 		palette_cmap.start = 32 + i;
216 		palette_cmap.len = n;
217 		for (j = 0; j < n; ++j) {
218 			palette_cmap.red[j] = clut[0] << 8 | clut[0];
219 			palette_cmap.green[j] = clut[1] << 8 | clut[1];
220 			palette_cmap.blue[j] = clut[2] << 8 | clut[2];
221 			clut += 3;
222 		}
223 		fb_set_cmap(&palette_cmap, info);
224 	}
225 }
226 
fb_set_logo_truepalette(struct fb_info * info,const struct linux_logo * logo,u32 * palette)227 static void  fb_set_logo_truepalette(struct fb_info *info,
228 					    const struct linux_logo *logo,
229 					    u32 *palette)
230 {
231 	static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
232 	unsigned char redmask, greenmask, bluemask;
233 	int redshift, greenshift, blueshift;
234 	int i;
235 	const unsigned char *clut = logo->clut;
236 
237 	/*
238 	 * We have to create a temporary palette since console palette is only
239 	 * 16 colors long.
240 	 */
241 	/* Bug: Doesn't obey msb_right ... (who needs that?) */
242 	redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
243 	greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
244 	bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
245 	redshift   = info->var.red.offset   - (8 - info->var.red.length);
246 	greenshift = info->var.green.offset - (8 - info->var.green.length);
247 	blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
248 
249 	for ( i = 0; i < logo->clutsize; i++) {
250 		palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
251 				 safe_shift((clut[1] & greenmask), greenshift) |
252 				 safe_shift((clut[2] & bluemask), blueshift));
253 		clut += 3;
254 	}
255 }
256 
fb_set_logo_directpalette(struct fb_info * info,const struct linux_logo * logo,u32 * palette)257 static void fb_set_logo_directpalette(struct fb_info *info,
258 					     const struct linux_logo *logo,
259 					     u32 *palette)
260 {
261 	int redshift, greenshift, blueshift;
262 	int i;
263 
264 	redshift = info->var.red.offset;
265 	greenshift = info->var.green.offset;
266 	blueshift = info->var.blue.offset;
267 
268 	for (i = 32; i < 32 + logo->clutsize; i++)
269 		palette[i] = i << redshift | i << greenshift | i << blueshift;
270 }
271 
fb_set_logo(struct fb_info * info,const struct linux_logo * logo,u8 * dst,int depth)272 static void fb_set_logo(struct fb_info *info,
273 			       const struct linux_logo *logo, u8 *dst,
274 			       int depth)
275 {
276 	int i, j, k;
277 	const u8 *src = logo->data;
278 	u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
279 	u8 fg = 1, d;
280 
281 	switch (fb_get_color_depth(&info->var, &info->fix)) {
282 	case 1:
283 		fg = 1;
284 		break;
285 	case 2:
286 		fg = 3;
287 		break;
288 	default:
289 		fg = 7;
290 		break;
291 	}
292 
293 	if (info->fix.visual == FB_VISUAL_MONO01 ||
294 	    info->fix.visual == FB_VISUAL_MONO10)
295 		fg = ~((u8) (0xfff << info->var.green.length));
296 
297 	switch (depth) {
298 	case 4:
299 		for (i = 0; i < logo->height; i++)
300 			for (j = 0; j < logo->width; src++) {
301 				*dst++ = *src >> 4;
302 				j++;
303 				if (j < logo->width) {
304 					*dst++ = *src & 0x0f;
305 					j++;
306 				}
307 			}
308 		break;
309 	case 1:
310 		for (i = 0; i < logo->height; i++) {
311 			for (j = 0; j < logo->width; src++) {
312 				d = *src ^ xor;
313 				for (k = 7; k >= 0; k--) {
314 					*dst++ = ((d >> k) & 1) ? fg : 0;
315 					j++;
316 				}
317 			}
318 		}
319 		break;
320 	}
321 }
322 
323 /*
324  * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
325  * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
326  * the visual format and color depth of the framebuffer, the DAC, the
327  * pseudo_palette, and the logo data will be adjusted accordingly.
328  *
329  * Case 1 - linux_logo_clut224:
330  * Color exceeds the number of console colors (16), thus we set the hardware DAC
331  * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
332  *
333  * For visuals that require color info from the pseudo_palette, we also construct
334  * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
335  * will be set.
336  *
337  * Case 2 - linux_logo_vga16:
338  * The number of colors just matches the console colors, thus there is no need
339  * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
340  * each byte contains color information for two pixels (upper and lower nibble).
341  * To be consistent with fb_imageblit() usage, we therefore separate the two
342  * nibbles into separate bytes. The "depth" flag will be set to 4.
343  *
344  * Case 3 - linux_logo_mono:
345  * This is similar with Case 2.  Each byte contains information for 8 pixels.
346  * We isolate each bit and expand each into a byte. The "depth" flag will
347  * be set to 1.
348  */
349 static struct logo_data {
350 	int depth;
351 	int needs_directpalette;
352 	int needs_truepalette;
353 	int needs_cmapreset;
354 	const struct linux_logo *logo;
355 } fb_logo __read_mostly;
356 
fb_rotate_logo_ud(const u8 * in,u8 * out,u32 width,u32 height)357 static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
358 {
359 	u32 size = width * height, i;
360 
361 	out += size - 1;
362 
363 	for (i = size; i--; )
364 		*out-- = *in++;
365 }
366 
fb_rotate_logo_cw(const u8 * in,u8 * out,u32 width,u32 height)367 static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
368 {
369 	int i, j, h = height - 1;
370 
371 	for (i = 0; i < height; i++)
372 		for (j = 0; j < width; j++)
373 				out[height * j + h - i] = *in++;
374 }
375 
fb_rotate_logo_ccw(const u8 * in,u8 * out,u32 width,u32 height)376 static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
377 {
378 	int i, j, w = width - 1;
379 
380 	for (i = 0; i < height; i++)
381 		for (j = 0; j < width; j++)
382 			out[height * (w - j) + i] = *in++;
383 }
384 
fb_rotate_logo(struct fb_info * info,u8 * dst,struct fb_image * image,int rotate)385 static void fb_rotate_logo(struct fb_info *info, u8 *dst,
386 			   struct fb_image *image, int rotate)
387 {
388 	u32 tmp;
389 
390 	if (rotate == FB_ROTATE_UD) {
391 		fb_rotate_logo_ud(image->data, dst, image->width,
392 				  image->height);
393 		image->dx = info->var.xres - image->width - image->dx;
394 		image->dy = info->var.yres - image->height - image->dy;
395 	} else if (rotate == FB_ROTATE_CW) {
396 		fb_rotate_logo_cw(image->data, dst, image->width,
397 				  image->height);
398 		tmp = image->width;
399 		image->width = image->height;
400 		image->height = tmp;
401 		tmp = image->dy;
402 		image->dy = image->dx;
403 		image->dx = info->var.xres - image->width - tmp;
404 	} else if (rotate == FB_ROTATE_CCW) {
405 		fb_rotate_logo_ccw(image->data, dst, image->width,
406 				   image->height);
407 		tmp = image->width;
408 		image->width = image->height;
409 		image->height = tmp;
410 		tmp = image->dx;
411 		image->dx = image->dy;
412 		image->dy = info->var.yres - image->height - tmp;
413 	}
414 
415 	image->data = dst;
416 }
417 
fb_do_show_logo(struct fb_info * info,struct fb_image * image,int rotate,unsigned int num)418 static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
419 			    int rotate, unsigned int num)
420 {
421 	unsigned int x;
422 
423 	if (rotate == FB_ROTATE_UR) {
424 		for (x = 0;
425 		     x < num && image->dx + image->width <= info->var.xres;
426 		     x++) {
427 			info->fbops->fb_imageblit(info, image);
428 			image->dx += image->width + 8;
429 		}
430 	} else if (rotate == FB_ROTATE_UD) {
431 		for (x = 0; x < num && image->dx >= 0; x++) {
432 			info->fbops->fb_imageblit(info, image);
433 			image->dx -= image->width + 8;
434 		}
435 	} else if (rotate == FB_ROTATE_CW) {
436 		for (x = 0;
437 		     x < num && image->dy + image->height <= info->var.yres;
438 		     x++) {
439 			info->fbops->fb_imageblit(info, image);
440 			image->dy += image->height + 8;
441 		}
442 	} else if (rotate == FB_ROTATE_CCW) {
443 		for (x = 0; x < num && image->dy >= 0; x++) {
444 			info->fbops->fb_imageblit(info, image);
445 			image->dy -= image->height + 8;
446 		}
447 	}
448 }
449 
fb_show_logo_line(struct fb_info * info,int rotate,const struct linux_logo * logo,int y,unsigned int n)450 static int fb_show_logo_line(struct fb_info *info, int rotate,
451 			     const struct linux_logo *logo, int y,
452 			     unsigned int n)
453 {
454 	u32 *palette = NULL, *saved_pseudo_palette = NULL;
455 	unsigned char *logo_new = NULL, *logo_rotate = NULL;
456 	struct fb_image image;
457 
458 	/* Return if the frame buffer is not mapped or suspended */
459 	if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
460 	    info->flags & FBINFO_MODULE)
461 		return 0;
462 
463 	image.depth = 8;
464 	image.data = logo->data;
465 
466 	if (fb_logo.needs_cmapreset)
467 		fb_set_logocmap(info, logo);
468 
469 	if (fb_logo.needs_truepalette ||
470 	    fb_logo.needs_directpalette) {
471 		palette = kmalloc(256 * 4, GFP_KERNEL);
472 		if (palette == NULL)
473 			return 0;
474 
475 		if (fb_logo.needs_truepalette)
476 			fb_set_logo_truepalette(info, logo, palette);
477 		else
478 			fb_set_logo_directpalette(info, logo, palette);
479 
480 		saved_pseudo_palette = info->pseudo_palette;
481 		info->pseudo_palette = palette;
482 	}
483 
484 	if (fb_logo.depth <= 4) {
485 		logo_new = kmalloc(logo->width * logo->height, GFP_KERNEL);
486 		if (logo_new == NULL) {
487 			kfree(palette);
488 			if (saved_pseudo_palette)
489 				info->pseudo_palette = saved_pseudo_palette;
490 			return 0;
491 		}
492 		image.data = logo_new;
493 		fb_set_logo(info, logo, logo_new, fb_logo.depth);
494 	}
495 
496 	image.dx = 0;
497 	image.dy = y;
498 	image.width = logo->width;
499 	image.height = logo->height;
500 
501 	if (rotate) {
502 		logo_rotate = kmalloc(logo->width *
503 				      logo->height, GFP_KERNEL);
504 		if (logo_rotate)
505 			fb_rotate_logo(info, logo_rotate, &image, rotate);
506 	}
507 
508 	fb_do_show_logo(info, &image, rotate, n);
509 
510 	kfree(palette);
511 	if (saved_pseudo_palette != NULL)
512 		info->pseudo_palette = saved_pseudo_palette;
513 	kfree(logo_new);
514 	kfree(logo_rotate);
515 	return logo->height;
516 }
517 
518 
519 #ifdef CONFIG_FB_LOGO_EXTRA
520 
521 #define FB_LOGO_EX_NUM_MAX 10
522 static struct logo_data_extra {
523 	const struct linux_logo *logo;
524 	unsigned int n;
525 } fb_logo_ex[FB_LOGO_EX_NUM_MAX];
526 static unsigned int fb_logo_ex_num;
527 
fb_append_extra_logo(const struct linux_logo * logo,unsigned int n)528 void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
529 {
530 	if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
531 		return;
532 
533 	fb_logo_ex[fb_logo_ex_num].logo = logo;
534 	fb_logo_ex[fb_logo_ex_num].n = n;
535 	fb_logo_ex_num++;
536 }
537 
fb_prepare_extra_logos(struct fb_info * info,unsigned int height,unsigned int yres)538 static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
539 				  unsigned int yres)
540 {
541 	unsigned int i;
542 
543 	/* FIXME: logo_ex supports only truecolor fb. */
544 	if (info->fix.visual != FB_VISUAL_TRUECOLOR)
545 		fb_logo_ex_num = 0;
546 
547 	for (i = 0; i < fb_logo_ex_num; i++) {
548 		if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
549 			fb_logo_ex[i].logo = NULL;
550 			continue;
551 		}
552 		height += fb_logo_ex[i].logo->height;
553 		if (height > yres) {
554 			height -= fb_logo_ex[i].logo->height;
555 			fb_logo_ex_num = i;
556 			break;
557 		}
558 	}
559 	return height;
560 }
561 
fb_show_extra_logos(struct fb_info * info,int y,int rotate)562 static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
563 {
564 	unsigned int i;
565 
566 	for (i = 0; i < fb_logo_ex_num; i++)
567 		y += fb_show_logo_line(info, rotate,
568 				       fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
569 
570 	return y;
571 }
572 
573 #else /* !CONFIG_FB_LOGO_EXTRA */
574 
fb_prepare_extra_logos(struct fb_info * info,unsigned int height,unsigned int yres)575 static inline int fb_prepare_extra_logos(struct fb_info *info,
576 					 unsigned int height,
577 					 unsigned int yres)
578 {
579 	return height;
580 }
581 
fb_show_extra_logos(struct fb_info * info,int y,int rotate)582 static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
583 {
584 	return y;
585 }
586 
587 #endif /* CONFIG_FB_LOGO_EXTRA */
588 
589 
fb_prepare_logo(struct fb_info * info,int rotate)590 int fb_prepare_logo(struct fb_info *info, int rotate)
591 {
592 	int depth = fb_get_color_depth(&info->var, &info->fix);
593 	unsigned int yres;
594 
595 	memset(&fb_logo, 0, sizeof(struct logo_data));
596 
597 	if (info->flags & FBINFO_MISC_TILEBLITTING ||
598 	    info->flags & FBINFO_MODULE)
599 		return 0;
600 
601 	if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
602 		depth = info->var.blue.length;
603 		if (info->var.red.length < depth)
604 			depth = info->var.red.length;
605 		if (info->var.green.length < depth)
606 			depth = info->var.green.length;
607 	}
608 
609 	if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
610 		/* assume console colormap */
611 		depth = 4;
612 	}
613 
614 	/* Return if no suitable logo was found */
615 	fb_logo.logo = fb_find_logo(depth);
616 
617 	if (!fb_logo.logo) {
618 		return 0;
619 	}
620 
621 	if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
622 		yres = info->var.yres;
623 	else
624 		yres = info->var.xres;
625 
626 	if (fb_logo.logo->height > yres) {
627 		fb_logo.logo = NULL;
628 		return 0;
629 	}
630 
631 	/* What depth we asked for might be different from what we get */
632 	if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
633 		fb_logo.depth = 8;
634 	else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
635 		fb_logo.depth = 4;
636 	else
637 		fb_logo.depth = 1;
638 
639 
640  	if (fb_logo.depth > 4 && depth > 4) {
641  		switch (info->fix.visual) {
642  		case FB_VISUAL_TRUECOLOR:
643  			fb_logo.needs_truepalette = 1;
644  			break;
645  		case FB_VISUAL_DIRECTCOLOR:
646  			fb_logo.needs_directpalette = 1;
647  			fb_logo.needs_cmapreset = 1;
648  			break;
649  		case FB_VISUAL_PSEUDOCOLOR:
650  			fb_logo.needs_cmapreset = 1;
651  			break;
652  		}
653  	}
654 
655 	return fb_prepare_extra_logos(info, fb_logo.logo->height, yres);
656 }
657 
fb_show_logo(struct fb_info * info,int rotate)658 int fb_show_logo(struct fb_info *info, int rotate)
659 {
660 	int y;
661 
662 	y = fb_show_logo_line(info, rotate, fb_logo.logo, 0,
663 			      num_online_cpus());
664 	y = fb_show_extra_logos(info, y, rotate);
665 
666 	return y;
667 }
668 #else
fb_prepare_logo(struct fb_info * info,int rotate)669 int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
fb_show_logo(struct fb_info * info,int rotate)670 int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
671 #endif /* CONFIG_LOGO */
672 
fb_seq_start(struct seq_file * m,loff_t * pos)673 static void *fb_seq_start(struct seq_file *m, loff_t *pos)
674 {
675 	mutex_lock(&registration_lock);
676 	return (*pos < FB_MAX) ? pos : NULL;
677 }
678 
fb_seq_next(struct seq_file * m,void * v,loff_t * pos)679 static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
680 {
681 	(*pos)++;
682 	return (*pos < FB_MAX) ? pos : NULL;
683 }
684 
fb_seq_stop(struct seq_file * m,void * v)685 static void fb_seq_stop(struct seq_file *m, void *v)
686 {
687 	mutex_unlock(&registration_lock);
688 }
689 
fb_seq_show(struct seq_file * m,void * v)690 static int fb_seq_show(struct seq_file *m, void *v)
691 {
692 	int i = *(loff_t *)v;
693 	struct fb_info *fi = registered_fb[i];
694 
695 	if (fi)
696 		seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
697 	return 0;
698 }
699 
700 static const struct seq_operations proc_fb_seq_ops = {
701 	.start	= fb_seq_start,
702 	.next	= fb_seq_next,
703 	.stop	= fb_seq_stop,
704 	.show	= fb_seq_show,
705 };
706 
proc_fb_open(struct inode * inode,struct file * file)707 static int proc_fb_open(struct inode *inode, struct file *file)
708 {
709 	return seq_open(file, &proc_fb_seq_ops);
710 }
711 
712 static const struct file_operations fb_proc_fops = {
713 	.owner		= THIS_MODULE,
714 	.open		= proc_fb_open,
715 	.read		= seq_read,
716 	.llseek		= seq_lseek,
717 	.release	= seq_release,
718 };
719 
720 /*
721  * We hold a reference to the fb_info in file->private_data,
722  * but if the current registered fb has changed, we don't
723  * actually want to use it.
724  *
725  * So look up the fb_info using the inode minor number,
726  * and just verify it against the reference we have.
727  */
file_fb_info(struct file * file)728 static struct fb_info *file_fb_info(struct file *file)
729 {
730 	struct inode *inode = file->f_path.dentry->d_inode;
731 	int fbidx = iminor(inode);
732 	struct fb_info *info = registered_fb[fbidx];
733 
734 	if (info != file->private_data)
735 		info = NULL;
736 	return info;
737 }
738 
739 static ssize_t
fb_read(struct file * file,char __user * buf,size_t count,loff_t * ppos)740 fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
741 {
742 	unsigned long p = *ppos;
743 	struct fb_info *info = file_fb_info(file);
744 	u8 *buffer, *dst;
745 	u8 __iomem *src;
746 	int c, cnt = 0, err = 0;
747 	unsigned long total_size;
748 
749 	if (!info || ! info->screen_base)
750 		return -ENODEV;
751 
752 	if (info->state != FBINFO_STATE_RUNNING)
753 		return -EPERM;
754 
755 	if (info->fbops->fb_read)
756 		return info->fbops->fb_read(info, buf, count, ppos);
757 
758 	total_size = info->screen_size;
759 
760 	if (total_size == 0)
761 		total_size = info->fix.smem_len;
762 
763 	if (p >= total_size)
764 		return 0;
765 
766 	if (count >= total_size)
767 		count = total_size;
768 
769 	if (count + p > total_size)
770 		count = total_size - p;
771 
772 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
773 			 GFP_KERNEL);
774 	if (!buffer)
775 		return -ENOMEM;
776 
777 	src = (u8 __iomem *) (info->screen_base + p);
778 
779 	if (info->fbops->fb_sync)
780 		info->fbops->fb_sync(info);
781 
782 	while (count) {
783 		c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
784 		dst = buffer;
785 		fb_memcpy_fromfb(dst, src, c);
786 		dst += c;
787 		src += c;
788 
789 		if (copy_to_user(buf, buffer, c)) {
790 			err = -EFAULT;
791 			break;
792 		}
793 		*ppos += c;
794 		buf += c;
795 		cnt += c;
796 		count -= c;
797 	}
798 
799 	kfree(buffer);
800 
801 	return (err) ? err : cnt;
802 }
803 
804 static ssize_t
fb_write(struct file * file,const char __user * buf,size_t count,loff_t * ppos)805 fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
806 {
807 	unsigned long p = *ppos;
808 	struct fb_info *info = file_fb_info(file);
809 	u8 *buffer, *src;
810 	u8 __iomem *dst;
811 	int c, cnt = 0, err = 0;
812 	unsigned long total_size;
813 
814 	if (!info || !info->screen_base)
815 		return -ENODEV;
816 
817 	if (info->state != FBINFO_STATE_RUNNING)
818 		return -EPERM;
819 
820 	if (info->fbops->fb_write)
821 		return info->fbops->fb_write(info, buf, count, ppos);
822 
823 	total_size = info->screen_size;
824 
825 	if (total_size == 0)
826 		total_size = info->fix.smem_len;
827 
828 	if (p > total_size)
829 		return -EFBIG;
830 
831 	if (count > total_size) {
832 		err = -EFBIG;
833 		count = total_size;
834 	}
835 
836 	if (count + p > total_size) {
837 		if (!err)
838 			err = -ENOSPC;
839 
840 		count = total_size - p;
841 	}
842 
843 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
844 			 GFP_KERNEL);
845 	if (!buffer)
846 		return -ENOMEM;
847 
848 	dst = (u8 __iomem *) (info->screen_base + p);
849 
850 	if (info->fbops->fb_sync)
851 		info->fbops->fb_sync(info);
852 
853 	while (count) {
854 		c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
855 		src = buffer;
856 
857 		if (copy_from_user(src, buf, c)) {
858 			err = -EFAULT;
859 			break;
860 		}
861 
862 		fb_memcpy_tofb(dst, src, c);
863 		dst += c;
864 		src += c;
865 		*ppos += c;
866 		buf += c;
867 		cnt += c;
868 		count -= c;
869 	}
870 
871 	kfree(buffer);
872 
873 	return (cnt) ? cnt : err;
874 }
875 
876 int
fb_pan_display(struct fb_info * info,struct fb_var_screeninfo * var)877 fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
878 {
879 	struct fb_fix_screeninfo *fix = &info->fix;
880 	unsigned int yres = info->var.yres;
881 	int err = 0;
882 
883 	if (var->yoffset > 0) {
884 		if (var->vmode & FB_VMODE_YWRAP) {
885 			if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
886 				err = -EINVAL;
887 			else
888 				yres = 0;
889 		} else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
890 			err = -EINVAL;
891 	}
892 
893 	if (var->xoffset > 0 && (!fix->xpanstep ||
894 				 (var->xoffset % fix->xpanstep)))
895 		err = -EINVAL;
896 
897 	if (err || !info->fbops->fb_pan_display ||
898 	    var->yoffset > info->var.yres_virtual - yres ||
899 	    var->xoffset > info->var.xres_virtual - info->var.xres)
900 		return -EINVAL;
901 
902 	if ((err = info->fbops->fb_pan_display(var, info)))
903 		return err;
904 	info->var.xoffset = var->xoffset;
905 	info->var.yoffset = var->yoffset;
906 	if (var->vmode & FB_VMODE_YWRAP)
907 		info->var.vmode |= FB_VMODE_YWRAP;
908 	else
909 		info->var.vmode &= ~FB_VMODE_YWRAP;
910 	return 0;
911 }
912 
fb_check_caps(struct fb_info * info,struct fb_var_screeninfo * var,u32 activate)913 static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
914 			 u32 activate)
915 {
916 	struct fb_event event;
917 	struct fb_blit_caps caps, fbcaps;
918 	int err = 0;
919 
920 	memset(&caps, 0, sizeof(caps));
921 	memset(&fbcaps, 0, sizeof(fbcaps));
922 	caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
923 	event.info = info;
924 	event.data = &caps;
925 	fb_notifier_call_chain(FB_EVENT_GET_REQ, &event);
926 	info->fbops->fb_get_caps(info, &fbcaps, var);
927 
928 	if (((fbcaps.x ^ caps.x) & caps.x) ||
929 	    ((fbcaps.y ^ caps.y) & caps.y) ||
930 	    (fbcaps.len < caps.len))
931 		err = -EINVAL;
932 
933 	return err;
934 }
935 
936 int
fb_set_var(struct fb_info * info,struct fb_var_screeninfo * var)937 fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
938 {
939 	int flags = info->flags;
940 	int ret = 0;
941 
942 	if (var->activate & FB_ACTIVATE_INV_MODE) {
943 		struct fb_videomode mode1, mode2;
944 
945 		fb_var_to_videomode(&mode1, var);
946 		fb_var_to_videomode(&mode2, &info->var);
947 		/* make sure we don't delete the videomode of current var */
948 		ret = fb_mode_is_equal(&mode1, &mode2);
949 
950 		if (!ret) {
951 		    struct fb_event event;
952 
953 		    event.info = info;
954 		    event.data = &mode1;
955 		    ret = fb_notifier_call_chain(FB_EVENT_MODE_DELETE, &event);
956 		}
957 
958 		if (!ret)
959 		    fb_delete_videomode(&mode1, &info->modelist);
960 
961 
962 		ret = (ret) ? -EINVAL : 0;
963 		goto done;
964 	}
965 
966 	if ((var->activate & FB_ACTIVATE_FORCE) ||
967 	    memcmp(&info->var, var, sizeof(struct fb_var_screeninfo))) {
968 		u32 activate = var->activate;
969 
970 		if (!info->fbops->fb_check_var) {
971 			*var = info->var;
972 			goto done;
973 		}
974 
975 		ret = info->fbops->fb_check_var(var, info);
976 
977 		if (ret)
978 			goto done;
979 
980 		if ((var->activate & FB_ACTIVATE_MASK) == FB_ACTIVATE_NOW) {
981 			struct fb_var_screeninfo old_var;
982 			struct fb_videomode mode;
983 
984 			if (info->fbops->fb_get_caps) {
985 				ret = fb_check_caps(info, var, activate);
986 
987 				if (ret)
988 					goto done;
989 			}
990 
991 			old_var = info->var;
992 			info->var = *var;
993 
994 			if (info->fbops->fb_set_par) {
995 				ret = info->fbops->fb_set_par(info);
996 
997 				if (ret) {
998 					info->var = old_var;
999 					printk(KERN_WARNING "detected "
1000 						"fb_set_par error, "
1001 						"error code: %d\n", ret);
1002 					goto done;
1003 				}
1004 			}
1005 
1006 			fb_pan_display(info, &info->var);
1007 			fb_set_cmap(&info->cmap, info);
1008 			fb_var_to_videomode(&mode, &info->var);
1009 
1010 			if (info->modelist.prev && info->modelist.next &&
1011 			    !list_empty(&info->modelist))
1012 				ret = fb_add_videomode(&mode, &info->modelist);
1013 
1014 			if (!ret && (flags & FBINFO_MISC_USEREVENT)) {
1015 				struct fb_event event;
1016 				int evnt = (activate & FB_ACTIVATE_ALL) ?
1017 					FB_EVENT_MODE_CHANGE_ALL :
1018 					FB_EVENT_MODE_CHANGE;
1019 
1020 				info->flags &= ~FBINFO_MISC_USEREVENT;
1021 				event.info = info;
1022 				event.data = &mode;
1023 				fb_notifier_call_chain(evnt, &event);
1024 			}
1025 		}
1026 	}
1027 
1028  done:
1029 	return ret;
1030 }
1031 
1032 int
fb_blank(struct fb_info * info,int blank)1033 fb_blank(struct fb_info *info, int blank)
1034 {
1035  	int ret = -EINVAL;
1036 
1037  	if (blank > FB_BLANK_POWERDOWN)
1038  		blank = FB_BLANK_POWERDOWN;
1039 
1040 	if (info->fbops->fb_blank)
1041  		ret = info->fbops->fb_blank(blank, info);
1042 
1043  	if (!ret) {
1044 		struct fb_event event;
1045 
1046 		event.info = info;
1047 		event.data = &blank;
1048 		fb_notifier_call_chain(FB_EVENT_BLANK, &event);
1049 	}
1050 
1051  	return ret;
1052 }
1053 
do_fb_ioctl(struct fb_info * info,unsigned int cmd,unsigned long arg)1054 static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
1055 			unsigned long arg)
1056 {
1057 	struct fb_ops *fb;
1058 	struct fb_var_screeninfo var;
1059 	struct fb_fix_screeninfo fix;
1060 	struct fb_con2fbmap con2fb;
1061 	struct fb_cmap cmap_from;
1062 	struct fb_cmap_user cmap;
1063 	struct fb_event event;
1064 	void __user *argp = (void __user *)arg;
1065 	long ret = 0;
1066 
1067 	switch (cmd) {
1068 	case FBIOGET_VSCREENINFO:
1069 		if (!lock_fb_info(info))
1070 			return -ENODEV;
1071 		var = info->var;
1072 		unlock_fb_info(info);
1073 
1074 		ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
1075 		break;
1076 	case FBIOPUT_VSCREENINFO:
1077 		if (copy_from_user(&var, argp, sizeof(var)))
1078 			return -EFAULT;
1079 		if (!lock_fb_info(info))
1080 			return -ENODEV;
1081 		console_lock();
1082 		info->flags |= FBINFO_MISC_USEREVENT;
1083 		ret = fb_set_var(info, &var);
1084 		info->flags &= ~FBINFO_MISC_USEREVENT;
1085 		console_unlock();
1086 		unlock_fb_info(info);
1087 		if (!ret && copy_to_user(argp, &var, sizeof(var)))
1088 			ret = -EFAULT;
1089 		break;
1090 	case FBIOGET_FSCREENINFO:
1091 		if (!lock_fb_info(info))
1092 			return -ENODEV;
1093 		fix = info->fix;
1094 		unlock_fb_info(info);
1095 
1096 		ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
1097 		break;
1098 	case FBIOPUTCMAP:
1099 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1100 			return -EFAULT;
1101 		ret = fb_set_user_cmap(&cmap, info);
1102 		break;
1103 	case FBIOGETCMAP:
1104 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1105 			return -EFAULT;
1106 		if (!lock_fb_info(info))
1107 			return -ENODEV;
1108 		cmap_from = info->cmap;
1109 		unlock_fb_info(info);
1110 		ret = fb_cmap_to_user(&cmap_from, &cmap);
1111 		break;
1112 	case FBIOPAN_DISPLAY:
1113 		if (copy_from_user(&var, argp, sizeof(var)))
1114 			return -EFAULT;
1115 		if (!lock_fb_info(info))
1116 			return -ENODEV;
1117 		console_lock();
1118 		ret = fb_pan_display(info, &var);
1119 		console_unlock();
1120 		unlock_fb_info(info);
1121 		if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
1122 			return -EFAULT;
1123 		break;
1124 	case FBIO_CURSOR:
1125 		ret = -EINVAL;
1126 		break;
1127 	case FBIOGET_CON2FBMAP:
1128 		if (copy_from_user(&con2fb, argp, sizeof(con2fb)))
1129 			return -EFAULT;
1130 		if (con2fb.console < 1 || con2fb.console > MAX_NR_CONSOLES)
1131 			return -EINVAL;
1132 		con2fb.framebuffer = -1;
1133 		event.data = &con2fb;
1134 		if (!lock_fb_info(info))
1135 			return -ENODEV;
1136 		event.info = info;
1137 		fb_notifier_call_chain(FB_EVENT_GET_CONSOLE_MAP, &event);
1138 		unlock_fb_info(info);
1139 		ret = copy_to_user(argp, &con2fb, sizeof(con2fb)) ? -EFAULT : 0;
1140 		break;
1141 	case FBIOPUT_CON2FBMAP:
1142 		if (copy_from_user(&con2fb, argp, sizeof(con2fb)))
1143 			return -EFAULT;
1144 		if (con2fb.console < 1 || con2fb.console > MAX_NR_CONSOLES)
1145 			return -EINVAL;
1146 		if (con2fb.framebuffer < 0 || con2fb.framebuffer >= FB_MAX)
1147 			return -EINVAL;
1148 		if (!registered_fb[con2fb.framebuffer])
1149 			request_module("fb%d", con2fb.framebuffer);
1150 		if (!registered_fb[con2fb.framebuffer]) {
1151 			ret = -EINVAL;
1152 			break;
1153 		}
1154 		event.data = &con2fb;
1155 		if (!lock_fb_info(info))
1156 			return -ENODEV;
1157 		event.info = info;
1158 		ret = fb_notifier_call_chain(FB_EVENT_SET_CONSOLE_MAP, &event);
1159 		unlock_fb_info(info);
1160 		break;
1161 	case FBIOBLANK:
1162 		if (!lock_fb_info(info))
1163 			return -ENODEV;
1164 		console_lock();
1165 		info->flags |= FBINFO_MISC_USEREVENT;
1166 		ret = fb_blank(info, arg);
1167 		info->flags &= ~FBINFO_MISC_USEREVENT;
1168 		console_unlock();
1169 		unlock_fb_info(info);
1170 		break;
1171 	default:
1172 		if (!lock_fb_info(info))
1173 			return -ENODEV;
1174 		fb = info->fbops;
1175 		if (fb->fb_ioctl)
1176 			ret = fb->fb_ioctl(info, cmd, arg);
1177 		else
1178 			ret = -ENOTTY;
1179 		unlock_fb_info(info);
1180 	}
1181 	return ret;
1182 }
1183 
fb_ioctl(struct file * file,unsigned int cmd,unsigned long arg)1184 static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1185 {
1186 	struct fb_info *info = file_fb_info(file);
1187 
1188 	if (!info)
1189 		return -ENODEV;
1190 	return do_fb_ioctl(info, cmd, arg);
1191 }
1192 
1193 #ifdef CONFIG_COMPAT
1194 struct fb_fix_screeninfo32 {
1195 	char			id[16];
1196 	compat_caddr_t		smem_start;
1197 	u32			smem_len;
1198 	u32			type;
1199 	u32			type_aux;
1200 	u32			visual;
1201 	u16			xpanstep;
1202 	u16			ypanstep;
1203 	u16			ywrapstep;
1204 	u32			line_length;
1205 	compat_caddr_t		mmio_start;
1206 	u32			mmio_len;
1207 	u32			accel;
1208 	u16			reserved[3];
1209 };
1210 
1211 struct fb_cmap32 {
1212 	u32			start;
1213 	u32			len;
1214 	compat_caddr_t	red;
1215 	compat_caddr_t	green;
1216 	compat_caddr_t	blue;
1217 	compat_caddr_t	transp;
1218 };
1219 
fb_getput_cmap(struct fb_info * info,unsigned int cmd,unsigned long arg)1220 static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
1221 			  unsigned long arg)
1222 {
1223 	struct fb_cmap_user __user *cmap;
1224 	struct fb_cmap32 __user *cmap32;
1225 	__u32 data;
1226 	int err;
1227 
1228 	cmap = compat_alloc_user_space(sizeof(*cmap));
1229 	cmap32 = compat_ptr(arg);
1230 
1231 	if (copy_in_user(&cmap->start, &cmap32->start, 2 * sizeof(__u32)))
1232 		return -EFAULT;
1233 
1234 	if (get_user(data, &cmap32->red) ||
1235 	    put_user(compat_ptr(data), &cmap->red) ||
1236 	    get_user(data, &cmap32->green) ||
1237 	    put_user(compat_ptr(data), &cmap->green) ||
1238 	    get_user(data, &cmap32->blue) ||
1239 	    put_user(compat_ptr(data), &cmap->blue) ||
1240 	    get_user(data, &cmap32->transp) ||
1241 	    put_user(compat_ptr(data), &cmap->transp))
1242 		return -EFAULT;
1243 
1244 	err = do_fb_ioctl(info, cmd, (unsigned long) cmap);
1245 
1246 	if (!err) {
1247 		if (copy_in_user(&cmap32->start,
1248 				 &cmap->start,
1249 				 2 * sizeof(__u32)))
1250 			err = -EFAULT;
1251 	}
1252 	return err;
1253 }
1254 
do_fscreeninfo_to_user(struct fb_fix_screeninfo * fix,struct fb_fix_screeninfo32 __user * fix32)1255 static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
1256 				  struct fb_fix_screeninfo32 __user *fix32)
1257 {
1258 	__u32 data;
1259 	int err;
1260 
1261 	err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
1262 
1263 	data = (__u32) (unsigned long) fix->smem_start;
1264 	err |= put_user(data, &fix32->smem_start);
1265 
1266 	err |= put_user(fix->smem_len, &fix32->smem_len);
1267 	err |= put_user(fix->type, &fix32->type);
1268 	err |= put_user(fix->type_aux, &fix32->type_aux);
1269 	err |= put_user(fix->visual, &fix32->visual);
1270 	err |= put_user(fix->xpanstep, &fix32->xpanstep);
1271 	err |= put_user(fix->ypanstep, &fix32->ypanstep);
1272 	err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
1273 	err |= put_user(fix->line_length, &fix32->line_length);
1274 
1275 	data = (__u32) (unsigned long) fix->mmio_start;
1276 	err |= put_user(data, &fix32->mmio_start);
1277 
1278 	err |= put_user(fix->mmio_len, &fix32->mmio_len);
1279 	err |= put_user(fix->accel, &fix32->accel);
1280 	err |= copy_to_user(fix32->reserved, fix->reserved,
1281 			    sizeof(fix->reserved));
1282 
1283 	return err;
1284 }
1285 
fb_get_fscreeninfo(struct fb_info * info,unsigned int cmd,unsigned long arg)1286 static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
1287 			      unsigned long arg)
1288 {
1289 	mm_segment_t old_fs;
1290 	struct fb_fix_screeninfo fix;
1291 	struct fb_fix_screeninfo32 __user *fix32;
1292 	int err;
1293 
1294 	fix32 = compat_ptr(arg);
1295 
1296 	old_fs = get_fs();
1297 	set_fs(KERNEL_DS);
1298 	err = do_fb_ioctl(info, cmd, (unsigned long) &fix);
1299 	set_fs(old_fs);
1300 
1301 	if (!err)
1302 		err = do_fscreeninfo_to_user(&fix, fix32);
1303 
1304 	return err;
1305 }
1306 
fb_compat_ioctl(struct file * file,unsigned int cmd,unsigned long arg)1307 static long fb_compat_ioctl(struct file *file, unsigned int cmd,
1308 			    unsigned long arg)
1309 {
1310 	struct fb_info *info = file_fb_info(file);
1311 	struct fb_ops *fb;
1312 	long ret = -ENOIOCTLCMD;
1313 
1314 	if (!info)
1315 		return -ENODEV;
1316 	fb = info->fbops;
1317 	switch(cmd) {
1318 	case FBIOGET_VSCREENINFO:
1319 	case FBIOPUT_VSCREENINFO:
1320 	case FBIOPAN_DISPLAY:
1321 	case FBIOGET_CON2FBMAP:
1322 	case FBIOPUT_CON2FBMAP:
1323 		arg = (unsigned long) compat_ptr(arg);
1324 	case FBIOBLANK:
1325 		ret = do_fb_ioctl(info, cmd, arg);
1326 		break;
1327 
1328 	case FBIOGET_FSCREENINFO:
1329 		ret = fb_get_fscreeninfo(info, cmd, arg);
1330 		break;
1331 
1332 	case FBIOGETCMAP:
1333 	case FBIOPUTCMAP:
1334 		ret = fb_getput_cmap(info, cmd, arg);
1335 		break;
1336 
1337 	default:
1338 		if (fb->fb_compat_ioctl)
1339 			ret = fb->fb_compat_ioctl(info, cmd, arg);
1340 		break;
1341 	}
1342 	return ret;
1343 }
1344 #endif
1345 
1346 static int
fb_mmap(struct file * file,struct vm_area_struct * vma)1347 fb_mmap(struct file *file, struct vm_area_struct * vma)
1348 {
1349 	struct fb_info *info = file_fb_info(file);
1350 	struct fb_ops *fb;
1351 	unsigned long off;
1352 	unsigned long start;
1353 	u32 len;
1354 
1355 	if (!info)
1356 		return -ENODEV;
1357 	if (vma->vm_pgoff > (~0UL >> PAGE_SHIFT))
1358 		return -EINVAL;
1359 	off = vma->vm_pgoff << PAGE_SHIFT;
1360 	fb = info->fbops;
1361 	if (!fb)
1362 		return -ENODEV;
1363 	mutex_lock(&info->mm_lock);
1364 	if (fb->fb_mmap) {
1365 		int res;
1366 		res = fb->fb_mmap(info, vma);
1367 		mutex_unlock(&info->mm_lock);
1368 		return res;
1369 	}
1370 
1371 	/* frame buffer memory */
1372 	start = info->fix.smem_start;
1373 	len = PAGE_ALIGN((start & ~PAGE_MASK) + info->fix.smem_len);
1374 	if (off >= len) {
1375 		/* memory mapped io */
1376 		off -= len;
1377 		if (info->var.accel_flags) {
1378 			mutex_unlock(&info->mm_lock);
1379 			return -EINVAL;
1380 		}
1381 		start = info->fix.mmio_start;
1382 		len = PAGE_ALIGN((start & ~PAGE_MASK) + info->fix.mmio_len);
1383 	}
1384 	mutex_unlock(&info->mm_lock);
1385 	start &= PAGE_MASK;
1386 	if ((vma->vm_end - vma->vm_start + off) > len)
1387 		return -EINVAL;
1388 	off += start;
1389 	vma->vm_pgoff = off >> PAGE_SHIFT;
1390 	/* This is an IO map - tell maydump to skip this VMA */
1391 	vma->vm_flags |= VM_IO | VM_RESERVED;
1392 	vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
1393 	fb_pgprotect(file, vma, off);
1394 	if (io_remap_pfn_range(vma, vma->vm_start, off >> PAGE_SHIFT,
1395 			     vma->vm_end - vma->vm_start, vma->vm_page_prot))
1396 		return -EAGAIN;
1397 	return 0;
1398 }
1399 
1400 static int
fb_open(struct inode * inode,struct file * file)1401 fb_open(struct inode *inode, struct file *file)
1402 __acquires(&info->lock)
1403 __releases(&info->lock)
1404 {
1405 	int fbidx = iminor(inode);
1406 	struct fb_info *info;
1407 	int res = 0;
1408 
1409 	info = get_fb_info(fbidx);
1410 	if (!info) {
1411 		request_module("fb%d", fbidx);
1412 		info = get_fb_info(fbidx);
1413 		if (!info)
1414 			return -ENODEV;
1415 	}
1416 	if (IS_ERR(info))
1417 		return PTR_ERR(info);
1418 
1419 	mutex_lock(&info->lock);
1420 	if (!try_module_get(info->fbops->owner)) {
1421 		res = -ENODEV;
1422 		goto out;
1423 	}
1424 	file->private_data = info;
1425 	if (info->fbops->fb_open) {
1426 		res = info->fbops->fb_open(info,1);
1427 		if (res)
1428 			module_put(info->fbops->owner);
1429 	}
1430 #ifdef CONFIG_FB_DEFERRED_IO
1431 	if (info->fbdefio)
1432 		fb_deferred_io_open(info, inode, file);
1433 #endif
1434 out:
1435 	mutex_unlock(&info->lock);
1436 	if (res)
1437 		put_fb_info(info);
1438 	return res;
1439 }
1440 
1441 static int
fb_release(struct inode * inode,struct file * file)1442 fb_release(struct inode *inode, struct file *file)
1443 __acquires(&info->lock)
1444 __releases(&info->lock)
1445 {
1446 	struct fb_info * const info = file->private_data;
1447 
1448 	mutex_lock(&info->lock);
1449 	if (info->fbops->fb_release)
1450 		info->fbops->fb_release(info,1);
1451 	module_put(info->fbops->owner);
1452 	mutex_unlock(&info->lock);
1453 	put_fb_info(info);
1454 	return 0;
1455 }
1456 
1457 static const struct file_operations fb_fops = {
1458 	.owner =	THIS_MODULE,
1459 	.read =		fb_read,
1460 	.write =	fb_write,
1461 	.unlocked_ioctl = fb_ioctl,
1462 #ifdef CONFIG_COMPAT
1463 	.compat_ioctl = fb_compat_ioctl,
1464 #endif
1465 	.mmap =		fb_mmap,
1466 	.open =		fb_open,
1467 	.release =	fb_release,
1468 #ifdef HAVE_ARCH_FB_UNMAPPED_AREA
1469 	.get_unmapped_area = get_fb_unmapped_area,
1470 #endif
1471 #ifdef CONFIG_FB_DEFERRED_IO
1472 	.fsync =	fb_deferred_io_fsync,
1473 #endif
1474 	.llseek =	default_llseek,
1475 };
1476 
1477 struct class *fb_class;
1478 EXPORT_SYMBOL(fb_class);
1479 
fb_check_foreignness(struct fb_info * fi)1480 static int fb_check_foreignness(struct fb_info *fi)
1481 {
1482 	const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
1483 
1484 	fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
1485 
1486 #ifdef __BIG_ENDIAN
1487 	fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
1488 #else
1489 	fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
1490 #endif /* __BIG_ENDIAN */
1491 
1492 	if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
1493 		pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
1494 		       "support this framebuffer\n", fi->fix.id);
1495 		return -ENOSYS;
1496 	} else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
1497 		pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
1498 		       "support this framebuffer\n", fi->fix.id);
1499 		return -ENOSYS;
1500 	}
1501 
1502 	return 0;
1503 }
1504 
apertures_overlap(struct aperture * gen,struct aperture * hw)1505 static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
1506 {
1507 	/* is the generic aperture base the same as the HW one */
1508 	if (gen->base == hw->base)
1509 		return true;
1510 	/* is the generic aperture base inside the hw base->hw base+size */
1511 	if (gen->base > hw->base && gen->base < hw->base + hw->size)
1512 		return true;
1513 	return false;
1514 }
1515 
fb_do_apertures_overlap(struct apertures_struct * gena,struct apertures_struct * hwa)1516 static bool fb_do_apertures_overlap(struct apertures_struct *gena,
1517 				    struct apertures_struct *hwa)
1518 {
1519 	int i, j;
1520 	if (!hwa || !gena)
1521 		return false;
1522 
1523 	for (i = 0; i < hwa->count; ++i) {
1524 		struct aperture *h = &hwa->ranges[i];
1525 		for (j = 0; j < gena->count; ++j) {
1526 			struct aperture *g = &gena->ranges[j];
1527 			printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
1528 				(unsigned long long)g->base,
1529 				(unsigned long long)g->size,
1530 				(unsigned long long)h->base,
1531 				(unsigned long long)h->size);
1532 			if (apertures_overlap(g, h))
1533 				return true;
1534 		}
1535 	}
1536 
1537 	return false;
1538 }
1539 
1540 static int do_unregister_framebuffer(struct fb_info *fb_info);
1541 
1542 #define VGA_FB_PHYS 0xA0000
do_remove_conflicting_framebuffers(struct apertures_struct * a,const char * name,bool primary)1543 static void do_remove_conflicting_framebuffers(struct apertures_struct *a,
1544 				     const char *name, bool primary)
1545 {
1546 	int i;
1547 
1548 	/* check all firmware fbs and kick off if the base addr overlaps */
1549 	for (i = 0 ; i < FB_MAX; i++) {
1550 		struct apertures_struct *gen_aper;
1551 		if (!registered_fb[i])
1552 			continue;
1553 
1554 		if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1555 			continue;
1556 
1557 		gen_aper = registered_fb[i]->apertures;
1558 		if (fb_do_apertures_overlap(gen_aper, a) ||
1559 			(primary && gen_aper && gen_aper->count &&
1560 			 gen_aper->ranges[0].base == VGA_FB_PHYS)) {
1561 
1562 			printk(KERN_INFO "fb: conflicting fb hw usage "
1563 			       "%s vs %s - removing generic driver\n",
1564 			       name, registered_fb[i]->fix.id);
1565 			do_unregister_framebuffer(registered_fb[i]);
1566 		}
1567 	}
1568 }
1569 
do_register_framebuffer(struct fb_info * fb_info)1570 static int do_register_framebuffer(struct fb_info *fb_info)
1571 {
1572 	int i;
1573 	struct fb_event event;
1574 	struct fb_videomode mode;
1575 
1576 	if (fb_check_foreignness(fb_info))
1577 		return -ENOSYS;
1578 
1579 	do_remove_conflicting_framebuffers(fb_info->apertures, fb_info->fix.id,
1580 					 fb_is_primary_device(fb_info));
1581 
1582 	if (num_registered_fb == FB_MAX)
1583 		return -ENXIO;
1584 
1585 	num_registered_fb++;
1586 	for (i = 0 ; i < FB_MAX; i++)
1587 		if (!registered_fb[i])
1588 			break;
1589 	fb_info->node = i;
1590 	atomic_set(&fb_info->count, 1);
1591 	mutex_init(&fb_info->lock);
1592 	mutex_init(&fb_info->mm_lock);
1593 
1594 	fb_info->dev = device_create(fb_class, fb_info->device,
1595 				     MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
1596 	if (IS_ERR(fb_info->dev)) {
1597 		/* Not fatal */
1598 		printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
1599 		fb_info->dev = NULL;
1600 	} else
1601 		fb_init_device(fb_info);
1602 
1603 	if (fb_info->pixmap.addr == NULL) {
1604 		fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
1605 		if (fb_info->pixmap.addr) {
1606 			fb_info->pixmap.size = FBPIXMAPSIZE;
1607 			fb_info->pixmap.buf_align = 1;
1608 			fb_info->pixmap.scan_align = 1;
1609 			fb_info->pixmap.access_align = 32;
1610 			fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
1611 		}
1612 	}
1613 	fb_info->pixmap.offset = 0;
1614 
1615 	if (!fb_info->pixmap.blit_x)
1616 		fb_info->pixmap.blit_x = ~(u32)0;
1617 
1618 	if (!fb_info->pixmap.blit_y)
1619 		fb_info->pixmap.blit_y = ~(u32)0;
1620 
1621 	if (!fb_info->modelist.prev || !fb_info->modelist.next)
1622 		INIT_LIST_HEAD(&fb_info->modelist);
1623 
1624 	fb_var_to_videomode(&mode, &fb_info->var);
1625 	fb_add_videomode(&mode, &fb_info->modelist);
1626 	registered_fb[i] = fb_info;
1627 
1628 	event.info = fb_info;
1629 	if (!lock_fb_info(fb_info))
1630 		return -ENODEV;
1631 	fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
1632 	unlock_fb_info(fb_info);
1633 	return 0;
1634 }
1635 
do_unregister_framebuffer(struct fb_info * fb_info)1636 static int do_unregister_framebuffer(struct fb_info *fb_info)
1637 {
1638 	struct fb_event event;
1639 	int i, ret = 0;
1640 
1641 	i = fb_info->node;
1642 	if (i < 0 || i >= FB_MAX || registered_fb[i] != fb_info)
1643 		return -EINVAL;
1644 
1645 	if (!lock_fb_info(fb_info))
1646 		return -ENODEV;
1647 	event.info = fb_info;
1648 	ret = fb_notifier_call_chain(FB_EVENT_FB_UNBIND, &event);
1649 	unlock_fb_info(fb_info);
1650 
1651 	if (ret)
1652 		return -EINVAL;
1653 
1654 	if (fb_info->pixmap.addr &&
1655 	    (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT))
1656 		kfree(fb_info->pixmap.addr);
1657 	fb_destroy_modelist(&fb_info->modelist);
1658 	registered_fb[i] = NULL;
1659 	num_registered_fb--;
1660 	fb_cleanup_device(fb_info);
1661 	device_destroy(fb_class, MKDEV(FB_MAJOR, i));
1662 	event.info = fb_info;
1663 	fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
1664 
1665 	/* this may free fb info */
1666 	put_fb_info(fb_info);
1667 	return 0;
1668 }
1669 
remove_conflicting_framebuffers(struct apertures_struct * a,const char * name,bool primary)1670 void remove_conflicting_framebuffers(struct apertures_struct *a,
1671 				     const char *name, bool primary)
1672 {
1673 	mutex_lock(&registration_lock);
1674 	do_remove_conflicting_framebuffers(a, name, primary);
1675 	mutex_unlock(&registration_lock);
1676 }
1677 EXPORT_SYMBOL(remove_conflicting_framebuffers);
1678 
1679 /**
1680  *	register_framebuffer - registers a frame buffer device
1681  *	@fb_info: frame buffer info structure
1682  *
1683  *	Registers a frame buffer device @fb_info.
1684  *
1685  *	Returns negative errno on error, or zero for success.
1686  *
1687  */
1688 int
register_framebuffer(struct fb_info * fb_info)1689 register_framebuffer(struct fb_info *fb_info)
1690 {
1691 	int ret;
1692 
1693 	mutex_lock(&registration_lock);
1694 	ret = do_register_framebuffer(fb_info);
1695 	mutex_unlock(&registration_lock);
1696 
1697 	return ret;
1698 }
1699 
1700 /**
1701  *	unregister_framebuffer - releases a frame buffer device
1702  *	@fb_info: frame buffer info structure
1703  *
1704  *	Unregisters a frame buffer device @fb_info.
1705  *
1706  *	Returns negative errno on error, or zero for success.
1707  *
1708  *      This function will also notify the framebuffer console
1709  *      to release the driver.
1710  *
1711  *      This is meant to be called within a driver's module_exit()
1712  *      function. If this is called outside module_exit(), ensure
1713  *      that the driver implements fb_open() and fb_release() to
1714  *      check that no processes are using the device.
1715  */
1716 int
unregister_framebuffer(struct fb_info * fb_info)1717 unregister_framebuffer(struct fb_info *fb_info)
1718 {
1719 	int ret;
1720 
1721 	mutex_lock(&registration_lock);
1722 	ret = do_unregister_framebuffer(fb_info);
1723 	mutex_unlock(&registration_lock);
1724 
1725 	return ret;
1726 }
1727 
1728 /**
1729  *	fb_set_suspend - low level driver signals suspend
1730  *	@info: framebuffer affected
1731  *	@state: 0 = resuming, !=0 = suspending
1732  *
1733  *	This is meant to be used by low level drivers to
1734  * 	signal suspend/resume to the core & clients.
1735  *	It must be called with the console semaphore held
1736  */
fb_set_suspend(struct fb_info * info,int state)1737 void fb_set_suspend(struct fb_info *info, int state)
1738 {
1739 	struct fb_event event;
1740 
1741 	if (!lock_fb_info(info))
1742 		return;
1743 	event.info = info;
1744 	if (state) {
1745 		fb_notifier_call_chain(FB_EVENT_SUSPEND, &event);
1746 		info->state = FBINFO_STATE_SUSPENDED;
1747 	} else {
1748 		info->state = FBINFO_STATE_RUNNING;
1749 		fb_notifier_call_chain(FB_EVENT_RESUME, &event);
1750 	}
1751 	unlock_fb_info(info);
1752 }
1753 
1754 /**
1755  *	fbmem_init - init frame buffer subsystem
1756  *
1757  *	Initialize the frame buffer subsystem.
1758  *
1759  *	NOTE: This function is _only_ to be called by drivers/char/mem.c.
1760  *
1761  */
1762 
1763 static int __init
fbmem_init(void)1764 fbmem_init(void)
1765 {
1766 	proc_create("fb", 0, NULL, &fb_proc_fops);
1767 
1768 	if (register_chrdev(FB_MAJOR,"fb",&fb_fops))
1769 		printk("unable to get major %d for fb devs\n", FB_MAJOR);
1770 
1771 	fb_class = class_create(THIS_MODULE, "graphics");
1772 	if (IS_ERR(fb_class)) {
1773 		printk(KERN_WARNING "Unable to create fb class; errno = %ld\n", PTR_ERR(fb_class));
1774 		fb_class = NULL;
1775 	}
1776 	return 0;
1777 }
1778 
1779 #ifdef MODULE
1780 module_init(fbmem_init);
1781 static void __exit
fbmem_exit(void)1782 fbmem_exit(void)
1783 {
1784 	remove_proc_entry("fb", NULL);
1785 	class_destroy(fb_class);
1786 	unregister_chrdev(FB_MAJOR, "fb");
1787 }
1788 
1789 module_exit(fbmem_exit);
1790 MODULE_LICENSE("GPL");
1791 MODULE_DESCRIPTION("Framebuffer base");
1792 #else
1793 subsys_initcall(fbmem_init);
1794 #endif
1795 
fb_new_modelist(struct fb_info * info)1796 int fb_new_modelist(struct fb_info *info)
1797 {
1798 	struct fb_event event;
1799 	struct fb_var_screeninfo var = info->var;
1800 	struct list_head *pos, *n;
1801 	struct fb_modelist *modelist;
1802 	struct fb_videomode *m, mode;
1803 	int err = 1;
1804 
1805 	list_for_each_safe(pos, n, &info->modelist) {
1806 		modelist = list_entry(pos, struct fb_modelist, list);
1807 		m = &modelist->mode;
1808 		fb_videomode_to_var(&var, m);
1809 		var.activate = FB_ACTIVATE_TEST;
1810 		err = fb_set_var(info, &var);
1811 		fb_var_to_videomode(&mode, &var);
1812 		if (err || !fb_mode_is_equal(m, &mode)) {
1813 			list_del(pos);
1814 			kfree(pos);
1815 		}
1816 	}
1817 
1818 	err = 1;
1819 
1820 	if (!list_empty(&info->modelist)) {
1821 		if (!lock_fb_info(info))
1822 			return -ENODEV;
1823 		event.info = info;
1824 		err = fb_notifier_call_chain(FB_EVENT_NEW_MODELIST, &event);
1825 		unlock_fb_info(info);
1826 	}
1827 
1828 	return err;
1829 }
1830 
1831 static char *video_options[FB_MAX] __read_mostly;
1832 static int ofonly __read_mostly;
1833 
1834 /**
1835  * fb_get_options - get kernel boot parameters
1836  * @name:   framebuffer name as it would appear in
1837  *          the boot parameter line
1838  *          (video=<name>:<options>)
1839  * @option: the option will be stored here
1840  *
1841  * NOTE: Needed to maintain backwards compatibility
1842  */
fb_get_options(char * name,char ** option)1843 int fb_get_options(char *name, char **option)
1844 {
1845 	char *opt, *options = NULL;
1846 	int retval = 0;
1847 	int name_len = strlen(name), i;
1848 
1849 	if (name_len && ofonly && strncmp(name, "offb", 4))
1850 		retval = 1;
1851 
1852 	if (name_len && !retval) {
1853 		for (i = 0; i < FB_MAX; i++) {
1854 			if (video_options[i] == NULL)
1855 				continue;
1856 			if (!video_options[i][0])
1857 				continue;
1858 			opt = video_options[i];
1859 			if (!strncmp(name, opt, name_len) &&
1860 			    opt[name_len] == ':')
1861 				options = opt + name_len + 1;
1862 		}
1863 	}
1864 	if (options && !strncmp(options, "off", 3))
1865 		retval = 1;
1866 
1867 	if (option)
1868 		*option = options;
1869 
1870 	return retval;
1871 }
1872 
1873 #ifndef MODULE
1874 /**
1875  *	video_setup - process command line options
1876  *	@options: string of options
1877  *
1878  *	Process command line options for frame buffer subsystem.
1879  *
1880  *	NOTE: This function is a __setup and __init function.
1881  *            It only stores the options.  Drivers have to call
1882  *            fb_get_options() as necessary.
1883  *
1884  *	Returns zero.
1885  *
1886  */
video_setup(char * options)1887 static int __init video_setup(char *options)
1888 {
1889 	int i, global = 0;
1890 
1891 	if (!options || !*options)
1892  		global = 1;
1893 
1894  	if (!global && !strncmp(options, "ofonly", 6)) {
1895  		ofonly = 1;
1896  		global = 1;
1897  	}
1898 
1899  	if (!global && !strchr(options, ':')) {
1900  		fb_mode_option = options;
1901  		global = 1;
1902  	}
1903 
1904  	if (!global) {
1905  		for (i = 0; i < FB_MAX; i++) {
1906  			if (video_options[i] == NULL) {
1907  				video_options[i] = options;
1908  				break;
1909  			}
1910 
1911 		}
1912 	}
1913 
1914 	return 1;
1915 }
1916 __setup("video=", video_setup);
1917 #endif
1918 
1919     /*
1920      *  Visible symbols for modules
1921      */
1922 
1923 EXPORT_SYMBOL(register_framebuffer);
1924 EXPORT_SYMBOL(unregister_framebuffer);
1925 EXPORT_SYMBOL(num_registered_fb);
1926 EXPORT_SYMBOL(registered_fb);
1927 EXPORT_SYMBOL(fb_show_logo);
1928 EXPORT_SYMBOL(fb_set_var);
1929 EXPORT_SYMBOL(fb_blank);
1930 EXPORT_SYMBOL(fb_pan_display);
1931 EXPORT_SYMBOL(fb_get_buffer_offset);
1932 EXPORT_SYMBOL(fb_set_suspend);
1933 EXPORT_SYMBOL(fb_get_options);
1934 
1935 MODULE_LICENSE("GPL");
1936